Re: [savi] WGLC: draft-ietf-savi-dhcp-22
"Leaf Yeh" <leaf.yeh.sdo@gmail.com> Thu, 24 April 2014 06:23 UTC
Return-Path: <leaf.yeh.sdo@gmail.com>
X-Original-To: savi@ietfa.amsl.com
Delivered-To: savi@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4573C1A030F for <savi@ietfa.amsl.com>; Wed, 23 Apr 2014 23:23:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mmONnziotBID for <savi@ietfa.amsl.com>; Wed, 23 Apr 2014 23:23:00 -0700 (PDT)
Received: from mail-pb0-x22b.google.com (mail-pb0-x22b.google.com [IPv6:2607:f8b0:400e:c01::22b]) by ietfa.amsl.com (Postfix) with ESMTP id 3709D1A02CA for <savi@ietf.org>; Wed, 23 Apr 2014 23:23:00 -0700 (PDT)
Received: by mail-pb0-f43.google.com with SMTP id um1so1606930pbc.2 for <savi@ietf.org>; Wed, 23 Apr 2014 23:22:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-type:thread-index:content-language; bh=4xMIQIm3Iu83tboaBV+x+8F7ONj6MrwSrwuKL6EXVYQ=; b=rTKvMA/N+KJhTusKvZYbVo7mpJ27gdKuEM5pn8A0y8QePeas35hcHKTL3hFEvtEqIr THtgOR7p71i9D7/fqHc98yvhnmckkfvpB772eCN6D6KmfhNmO2aB2h/tj6qsVC1Q5feo h0T8fBXaWs8wWAh5RBpYWBiZ/JjgJKOZxkWgeB/iuJLnlVMeAhVgfSbtLE5XH87dU8nE /rjcsyPtZSFG/48BOAGJfEvKlf1GubiYKZJiTgc4xW+/y0OiodusrG9c+CHSNVFs6W31 X6MOUQIfr2MBBzzv3Rq9kqXW3sLngicWRb/xhCEczEVaECKrHe4X2XakGB44VhQ1zZQx 6KCg==
X-Received: by 10.68.181.165 with SMTP id dx5mr65413pbc.38.1398320574329; Wed, 23 Apr 2014 23:22:54 -0700 (PDT)
Received: from PC ([218.241.103.172]) by mx.google.com with ESMTPSA id kt8sm15578206pab.7.2014.04.23.23.22.50 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 23 Apr 2014 23:22:53 -0700 (PDT)
X-Google-Original-Message-ID: <006701cf5f85$9efdb570$dcf92050$@yeh.sdo@gmail.com>
From: Leaf Yeh <leaf.yeh.sdo@gmail.com>
To: "'Eric Levy- Abegnoli (elevyabe)'" <elevyabe@cisco.com>, 'Guang Yao' <yaoguang@cernet.edu.cn>, 'Jean-Michel Combes' <jeanmichel.combes@gmail.com>, 'SAVI Mailing List' <savi@ietf.org>
References: <000e01cf5d0a$4a279d40$de76d7c0$@cernet.edu.cn> <CF7DA1D3.390B5%elevyabe@cisco.com>
In-Reply-To: <CF7DA1D3.390B5%elevyabe@cisco.com>
Date: Thu, 24 Apr 2014 14:22:47 +0800
Message-ID: <5358adbd.6877420a.1025.0bb4@mx.google.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0068_01CF5FC8.AD20F570"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AQHPXwYz8FdOhs9nvUWZJnpcp77q9JsgFiMg
Content-Language: zh-cn
Archived-At: http://mailarchive.ietf.org/arch/msg/savi/eQwgpDkpi_mf7lpWuO2dX9q_ZRk
Cc: draft-ietf-savi-dhcp@tools.ietf.org, 'Ted Lemon' <mellon@fugue.com>
Subject: Re: [savi] WGLC: draft-ietf-savi-dhcp-22
X-BeenThere: savi@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Mailing list for the SAVI working group at IETF <savi.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/savi>, <mailto:savi-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/savi/>
List-Post: <mailto:savi@ietf.org>
List-Help: <mailto:savi-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/savi>, <mailto:savi-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Apr 2014 06:23:06 -0000
Hi Eric, I also wonder a further explanation on the following statement. <quote> MLD Considerations The FCFS SAVI device MUST join the solicited node multicast group for all the addresses with a state other than NO_BIND. This is needed to make sure that the FCFS SAVI device will receive the DAD_NS for those addresses. Please note that it may not be enough to rely on the host behind the Validating Port to do so, since the node may move, and after a while, the packets for that particular solicited node multicast group will no longer be forwarded to the FCFS SAVI device. Therefore, the FCFS SAVI device MUST join the solicited node multicast groups for all the addresses that are in a state other than NO_BIND. </quote> @ page 20 of RFC6620 If we believe it sounds a wrong message, would you like submit a Errata for it? J Best Regards, Leaf From: savi [mailto:savi-bounces@ietf.org] On Behalf Of Eric Levy- Abegnoli (elevyabe) Sent: Wednesday, April 23, 2014 11:11 PM To: Guang Yao; 'Jean-Michel Combes'; 'SAVI Mailing List' Cc: draft-ietf-savi-dhcp@tools.ietf.org; 'Ted Lemon' Subject: Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Hi Guang, I find the below section very confusing. SAVI devices are switches, hence they have other means to punt any traffic they want to inspect to cpu level. They would not "join multicast groups". A wild guess on the intention is to get around the case where some MLD snooping device is at stake in the network. Works for addresses that you know but can't possibly work for addresses that you don't know yet and that are being DAD'ed. MLD snooping is just incompatible with SAVI, and if we accept that fact, joining MLD solicited group is not needed. And it has the same issue I raised: access switches cannot reasonably have a layer-3 interface on every subnet (link/vlan) they operate on, which could be thousands. Sorry that I missed that in 6620. Eric From: Guang Yao <yaoguang@cernet.edu.cn> Date: lundi 21 avril 2014 04:34 To: elevyabe levy-abegnoli <elevyabe@cisco.com>, 'Jean-Michel Combes' <jeanmichel.combes@gmail.com>, 'SAVI Mailing List' <savi@ietf.org> Cc: "draft-ietf-savi-dhcp@tools.ietf.org" <draft-ietf-savi-dhcp@tools.ietf.org>, 'Ted Lemon' <mellon@fugue.com> Subject: RE: [savi] WGLC: draft-ietf-savi-dhcp-22 Hi, Eric Before we begin modifying the SAVI-DHCP, we find some related text in RFC6620: 1. " MLD Considerations The FCFS SAVI device MUST join the solicited node multicast group for all the addresses with a state other than NO_BIND. This is needed to make sure that the FCFS SAVI device will receive the DAD_NS for those addresses. Please note that it may not be enough to rely on the host behind the Validating Port to do so, since the node may move, and after a while, the packets for that particular solicited node multicast group will no longer be forwarded to the FCFS SAVI device. Therefore, the FCFS SAVI device MUST join the solicited node multicast groups for all the addresses that are in a state other than NO_BIND. " 2. "Upon the reception through a Validating Port (VP) of a DATA packet containing IPAddr as the source address, the SAVI device SHOULD execute the process of sending Neighbor Solicitation messages of the Duplicate Address Detection process as described in Section 5.4.2 of [RFC4862] " Maybe such designs also violate your comments? Thank you very much! Best regards, Guang From: Guang Yao [mailto:yaoguang@cernet.edu.cn] Sent: Monday, April 21, 2014 10:20 AM To: 'Eric Levy- Abegnoli (elevyabe)'; 'Jean-Michel Combes'; 'SAVI Mailing List' Cc: '<draft-ietf-savi-dhcp@tools.ietf.org>'; 'Ted Lemon' Subject: RE: [savi] WGLC: draft-ietf-savi-dhcp-22 Hi, Eric Thank you very much for the comments! 1. For the first one, considering the whole "data snooping process" is actually a "conditional should"(s7.1), the DHCP lease query process is actually no more than a "conditional should". The "MUST" just specifies if the data snooping process is to be implemented, the lease query process will be a MUST. Besides, it seems there is no good alternative method to set up bindings without DHCP lease query; however, if DHCP lease query cannot be performed, the whole data snooping process is meaningless. Thus, we choose "MUST" on DHCP lease query process. 2. We fully accept the second comment and will revise the doc accordingly. Best regards, Guang From: Eric Levy- Abegnoli (elevyabe) [mailto:elevyabe@cisco.com] Sent: Thursday, April 17, 2014 8:09 PM To: Jean-Michel Combes; SAVI Mailing List Cc: <draft-ietf-savi-dhcp@tools.ietf.org>; Ted Lemon Subject: Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Hi, In general, the document looks good. I spot a few substantial issues listed below: 1) There seem to be a requirement in several places of the document (see below) to send LEASEQUERY to the DHCP server. That is certainly useful to do so, but switches are sometimes pure layer-2 switches, and don't implement a DHCP stack not they have a layer-3 address to source traffic from. Even when the switches have a layer-3 leg, setting then to reach out the DHCP server is not a trivial operation, and not one which is typically done on layer-2 access switches. Whenever the LEASEQUERY is mandated, I'd rather have it as a SHOULD, with some alternate behavior (delete the entry for instance). Section 6.4.2.2, paragrap 2.1: the SAVI device MUST send a LEASEQUERY [RFC5007] Section 7.5.2.1 IPv4 address: Send a DHCPLEASEQUERY [RFC4388] IPv6 address: Send a LEASEQUERY [RFC5007] 2) Section 7.1 & 7.2 "To perform this process, the SAVI device MUST join the Solicited Node Multicast group of the source address of triggering IPv6 data packet whenever performing duplicate detection." * I don't think a layer-2 switch can and need to join the Solicited Node Multicast group of the source address. It does not have a layer-3 stack on top of every link it is bridging/switching. It has to snoop ND traffic, like it snoops DHCP traffic. Section 7.5.1.2 * I wonder what would be the end-result if the switch send a DAD or and ARP and the legitimate owner interpret it as "someone already has the address" (always possible depending on its current state). That would seriously break DAD or ACD (rfc5227). I think we need a way to distinguish between the packets issued by the switch and normal DAD or ACD packets. (some field in the header? But that would be a protocol change.). Eric From: Jean-Michel Combes <jeanmichel.combes@gmail.com> Date: mardi 8 avril 2014 12:15 To: SAVI Mailing List <savi@ietf.org> Cc: "<draft-ietf-savi-dhcp@tools.ietf.org>" <draft-ietf-savi-dhcp@tools.ietf.org>, Ted Lemon <mellon@fugue.com> Subject: [savi] WGLC: draft-ietf-savi-dhcp-22 Folks, As it has been deeply modified since the last WGLC (version -06), this is a new two weeks WGLC for the following document: "SAVI Solution for DHCP" (http://tools.ietf.org/html/draft-ietf-savi-dhcp-22). Please, don't hesitate to give your opinion (i.e., agreement/disagreement to move forward the document, comments, etc.)! Thanks in advance. Best regards, JMC.
- [savi] WGLC: draft-ietf-savi-dhcp-22 Jean-Michel Combes
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Jean-Michel Combes
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Eric Levy- Abegnoli (elevyabe)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Leaf Yeh
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Leaf Yeh
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Eric Levy- Abegnoli (elevyabe)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Ted Lemon
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Ted Lemon
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Pascal Thubert (pthubert)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Eric Levy- Abegnoli (elevyabe)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Eric Levy- Abegnoli (elevyabe)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Ted Lemon
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Eric Levy- Abegnoli (elevyabe)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Leaf Yeh
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Leaf Yeh
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Ted Lemon
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Pascal Thubert (pthubert)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Jun Bi
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Guang Yao
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Ted Lemon
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Jun Bi
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Fred Baker (fred)
- Re: [savi] WGLC: draft-ietf-savi-dhcp-22 Fred Baker (fred)